From bb3b98d50590bdb75ef0c1294621a6f60f50a66b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Jan 12 2018 19:57:47 +0000
Subject: atomic: add comment on why we disable firewall


In cloud Images we do this becaue it's generally accepted that
in a cloud environment there are higher level firewall constructs
(i.e. security groups).

---

diff --git a/fedora-atomic.ks b/fedora-atomic.ks
index 26e5353..e9c5848 100644
--- a/fedora-atomic.ks
+++ b/fedora-atomic.ks
@@ -25,6 +25,8 @@ auth --useshadow --passalgo=sha512
 selinux --enforcing
 rootpw --lock --iscrypted locked
 
+# Explicitly disable firewall since cloud providers generally provide
+# higher level firewall constructs (i.e. security groups).
 firewall --disabled
 
 # console=ttyAMA0 and console=hvc0 as kernel boot parameter to see